ContextQMD
Back to Flipper

Flipper Zero Sub Files To Brute-Force CAME 12bit Gate.

Sub-GHz/Garages/CAME_brute_force/README.md

latest4.1 KB
Original Source

Flipper Zero Sub Files To Brute-Force CAME 12bit Gate.

About the Project

433.92Mhz/CAMEbruteforcer433.py: will generate sub files which have all the possible keys combination for CAME gate (12bit code/433.92 Mhz), the code will generate multiple files splitted by user choice (500 keys in a file, 1000... etc).

868.35Mhz/CAMEbruteforcer868.py: will generate sub files which have all the possible keys combination for CAME gate (12bit code/868.35 Mhz), the code will generate multiple files splitted by user choice (500 keys in a file, 1000... etc).

CAMEall.sub: This contains all possible keys (4096), it needs less than 5 minutes to run completely (287 seconds), using this file will open the gate eventually, if you feel the need to know the exact key or shorten this process check the instructions below. I also attached the whole set of files splitted according to the number of keys.

Changelog

12-Aug-2022 : -Time reduced! the whole script now complete in ~4 minutes. -Folder created automatically

Installation

Tested for Python 3.10.0+

bash
$ git clone https://github.com/BitcoinRaven/CAMEbruteforcer.git
$ cd CAMEbruteforcer

Usage

Just run the script and it will generate all the required files.

bash
$ python CAMEbruteforcer.py

Practical Guide for Brute-Force attack using sub files.

This process is the best I can get with the current flipper firmware.

  1. Start with the 1000 keys file, each file will take around 1 minute. (for example the gate opened on file "1000-1999.sub")
  2. Go to the next set of files with 500 keys files, you need to run two files now (in our example we need to run "1000-1499.sub" and "1500-1999.sub"), lets assume it opened with "1500-1999.sub" file.
  3. Go to the next set of files with 100 keys files, you need to run five files now, each file will take 5 seconds to run.
  4. if you feel you really need to know the exact code, generate less files with the script (50, 10...) and continue the same process.

Folder system and Timing

2000FromToTime
001999~2 min
120003999~2 min
240004096~5 sec
1000FromToTime
00999~1 min
110001999~1 min
220001999~1 min
330003999~1 min
440004096~5 sec
500FromToTime
00499~27 sec
1500999~27 sec
210001499~27 sec
315001999~27 sec
420002499~27 sec
525002999~27 sec
630003499~27 sec
735003999~27 sec
840004096~5 sec

Thanks

@tobiabocchi for the updated code and great ideas! check his codes for more protocols and explanation for the recent optimization

Donation Information

Nothing is ever expected for the hoarding of digital files, creations I have made, or the people I may have helped.

Ordering from Lab401? USE THIS LINK FOR 5% OFF! (Or code UberGuidoZ at checkout.)

I've had so many asking for me to add this.

BTC: 3AWgaL3FxquakP15ZVDxr8q8xVTc5Q75dS

BCH: 17nWCvf2YPMZ3F3H1seX8T149Z9E3BMKXk

ETH: 0x0f0003fCB0bD9355Ad7B124c30b9F3D860D5E191

LTC: M8Ujk52U27bkm1ksiWUyteL8b3rRQVMke2

PayPal: [email protected]

So, here it is. All donations of any size are humbly appreciated.

Donations will be used for hardware (and maybe caffeine) to further testing!